Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
File: y1eZ2NBfSgIAEdyoAxdivqASJV0.mft (raw, json)
Hash identifier: 81voe4MRW7RHFgeob2+lQI8YuCWNrfoGp8ApY8rIgCk=
Subject key identifier: 96:E8:7A:68:7F:3E:B4:A4:60:4E:63:6B:87:C7:3B:5F:F5:75:BE:B2
Authority key identifier: CB:57:99:D8:D0:5F:4A:02:00:11:DC:A8:03:17:62:BE:A0:12:25:5D
Certificate issuer: /CN=cb5799d8d05f4a020011dca8031762bea012255d
Certificate serial: 018F8749DBBB38045F75C955D1F7D87E622F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
Manifest number: 06E3
Signing time: Fri 17 May 2024 16:01:55 +0000
Manifest this update: Fri 17 May 2024 16:01:55 +0000
Manifest next update: Sat 18 May 2024 16:01:55 +0000
Files and hashes: 1: VVi2AeeND2YAMXG3tX9hNKKJB0U.roa (hash: rg8F29mgN9CLL79yuOHFg7VTmemPT39fX4LbyECEcus=)
2: ZgXH7g-aUfK1ehVe010onFZj78k.roa (hash: NUk21hqhloDAaeTFnpiR9xyurUnIWUjeV5ujM8REUrQ=)
3: y1eZ2NBfSgIAEdyoAxdivqASJV0.crl (hash: 10ONHzFlcMzs8xuBKHEz6PX0aMUoQVjDYGv8dheEqac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:49:db:bb:38:04:5f:75:c9:55:d1:f7:d8:7e:62:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb5799d8d05f4a020011dca8031762bea012255d
Validity
Not Before: May 17 16:01:55 2024 GMT
Not After : May 18 16:01:55 2024 GMT
Subject: CN=96e87a687f3eb4a4604e636b87c73b5ff575beb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:26:94:20:dd:3e:8b:5e:0c:e5:69:eb:70:b3:
94:39:bd:cd:06:f4:4d:37:c8:83:dd:1f:79:b5:07:
28:27:5f:67:14:4d:32:ce:66:04:ca:d4:ad:17:79:
30:07:3e:3d:cd:cd:99:0e:72:e7:0a:49:94:0e:bf:
31:b5:bd:7f:4d:e1:92:e1:df:59:2e:60:29:81:87:
3d:6c:6b:7d:12:c5:52:3e:4e:92:23:7f:28:f8:a1:
53:bb:e9:02:54:80:72:83:29:25:26:2c:32:13:c5:
4a:a1:d7:9c:ce:1f:0e:16:3c:f7:f8:30:ff:df:8c:
94:54:ee:ed:ca:98:5b:9c:af:0f:4a:58:3b:ff:0f:
74:68:e3:ab:75:46:4d:47:24:34:11:9c:4a:1d:f3:
e7:1d:ea:3e:e9:f0:02:c1:e4:60:13:38:54:20:d1:
52:60:60:d1:a9:05:b2:be:2e:62:7d:16:c5:22:bf:
05:f6:1f:bb:72:40:d1:ee:0a:76:17:50:51:4a:9c:
d1:fe:8e:21:05:64:70:46:85:c1:7c:cc:26:22:59:
32:9d:0e:bd:9b:23:eb:f4:eb:b7:14:5c:18:9c:f9:
d4:85:2c:e5:24:c9:9b:df:58:df:9d:04:11:ae:b4:
cd:e1:d5:71:a1:03:b6:e1:2e:48:81:4b:e4:3b:d4:
53:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E8:7A:68:7F:3E:B4:A4:60:4E:63:6B:87:C7:3B:5F:F5:75:BE:B2
X509v3 Authority Key Identifier:
keyid:CB:57:99:D8:D0:5F:4A:02:00:11:DC:A8:03:17:62:BE:A0:12:25:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:26:c6:c1:85:a8:fc:f2:39:e8:69:d6:bd:82:19:a5:19:e2:
de:d2:d2:ba:2a:54:e0:1f:b1:1c:7d:b1:d9:df:f8:f3:d8:4e:
1a:02:81:c7:9f:c1:c5:01:00:f7:f2:5b:a9:86:1e:3a:2f:46:
9a:7d:5a:b5:31:37:26:8d:3f:4b:2a:fd:33:d4:62:33:cb:df:
bd:de:73:bf:95:1e:05:31:3b:13:cc:34:cb:b7:6b:6a:f7:c2:
36:3c:26:f6:59:81:bf:aa:0f:c4:5c:8a:0f:7e:98:da:4c:53:
27:32:32:13:80:85:38:60:79:77:49:c8:a3:fe:81:36:ee:fe:
74:82:d8:95:01:d8:55:b3:d0:0d:3a:f2:17:94:7b:6c:83:89:
46:30:04:b6:87:68:47:ca:33:d5:67:5a:5e:7d:c6:5d:d0:33:
5e:c0:c2:07:e5:27:8c:ab:6b:7f:18:58:de:4f:c3:12:21:55:
1a:73:f7:f3:5a:f3:b8:7d:62:b2:6f:21:9d:ab:4c:45:f1:b4:
bf:c8:cb:fd:89:60:0c:ab:f6:6f:89:0f:32:d3:93:d4:55:a7:
f0:86:14:28:71:1e:7b:15:5f:1c:b2:3d:3e:18:0b:42:78:5a:
42:88:b1:d8:04:04:a1:84:f8:01:9c:ae:75:f2:7e:a9:d7:f1:
13:1a:88:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:00:04 2024 by rpki-client on console-ams.rpki-client.org